This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json) Hash identifier: UIScCG4x69edMlKcAy7nHn8vUucA94tSu5Sh3BMgoCI= Subject key identifier: 41:88:1B:8B:9E:BD:E5:2A:2C:AB:C9:6D:A3:D7:75:B5:6F:04:2A:14 Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Certificate serial: 019B21752809C5BC2ABC39772EC01E7DDCE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft Manifest number: 1784 Signing time: Mon 15 Dec 2025 10:01:24 +0000 Manifest this update: Mon 15 Dec 2025 10:01:24 +0000 Manifest next update: Tue 16 Dec 2025 10:01:24 +0000 Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=) 2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: KhEBwUmjM/qll7z36IqRaeXHhkWO7GxrwiKHPYEhoss=) 3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=) 4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:28:09:c5:bc:2a:bc:39:77:2e:c0:1e:7d:dc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Validity Not Before: Dec 15 10:01:24 2025 GMT Not After : Dec 16 10:01:24 2025 GMT Subject: CN=41881b8b9ebde52a2cabc96da3d775b56f042a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:be:f1:f6:ce:be:c8:3f:4f:94:d3:d9:98: f3:b1:5a:d4:31:4d:ca:58:30:20:1e:5b:fb:6e:d7: f9:02:a4:de:1d:56:c0:f9:93:e6:b1:a4:b3:04:da: 9c:62:fd:d8:af:a0:89:75:e5:1c:79:98:5d:0c:94: 20:11:a6:48:c5:44:c5:8b:82:74:17:7c:1b:9d:7b: 96:10:be:1a:e5:77:30:22:2e:c9:04:1c:b2:a1:52: 63:ad:89:4d:19:83:9e:3f:57:72:fc:70:a7:af:29: 1c:47:8a:a8:bc:cd:8a:b9:7b:3f:08:f8:2e:de:aa: 7d:94:72:1c:79:5b:2a:62:f9:c4:77:44:98:17:00: d1:72:bd:4d:15:49:d0:a9:6e:a4:c3:36:7f:8b:4b: 92:ba:ea:30:83:e1:0b:21:8c:ba:75:da:b3:a2:6c: 2a:6b:ca:b8:7f:a8:28:c7:82:63:d5:f5:7d:8c:cc: 84:fd:bd:7e:33:5c:09:4c:42:96:2e:18:dd:d3:79: 50:4b:c9:73:64:09:c6:67:25:5b:21:c7:ec:ee:79: 44:55:64:74:0e:8b:de:6f:b3:b6:09:d8:07:be:22: 19:6f:56:71:a8:fb:3a:4e:9d:01:df:15:6a:6a:33: b0:2d:01:24:5b:d4:45:64:4e:bf:40:52:fd:fa:d3: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:88:1B:8B:9E:BD:E5:2A:2C:AB:C9:6D:A3:D7:75:B5:6F:04:2A:14 X509v3 Authority Key Identifier: keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:fe:eb:9b:0a:78:48:25:3f:bf:86:ee:f6:64:19:9b:dd:1e: e9:6d:9d:95:06:57:1c:69:90:2b:23:f8:e3:ff:ed:dd:f2:16: 32:b6:19:e2:09:79:e8:e7:77:7f:d7:fe:7e:28:ec:99:5a:f1: 93:91:23:6c:b2:8d:b5:f0:f0:10:01:30:4f:34:ca:16:60:b2: 55:7f:ed:8f:e8:a5:f5:65:66:11:7d:2c:8d:d2:5a:ea:d8:ac: 0d:90:85:ab:a1:19:1a:dc:69:ed:41:de:97:b0:0b:6e:af:4f: 65:43:f7:21:61:5e:72:6d:ca:31:aa:32:c5:3b:f4:e6:f1:5b: 3a:4f:0b:00:c0:f7:c5:2a:49:01:f1:cb:07:e1:f2:f0:57:2b: cc:45:13:73:41:22:e1:ea:ff:77:7c:1f:ec:2a:cc:c9:86:aa: 86:44:d2:af:3b:38:b6:d8:ea:ba:bd:35:6b:2c:51:a2:d8:21: c5:d1:8d:4e:d7:87:bd:96:1a:72:40:76:0c:e0:ea:df:92:d7: a1:f5:16:ea:f1:16:94:a6:2b:c3:46:92:ce:b7:fa:21:0e:60: 3b:d2:89:c2:76:aa:db:36:5f:65:7f:b4:8e:b6:57:d7:8c:08: 56:f5:c1:1f:ce:aa:02:58:c3:3a:01:f1:96:0d:f4:09:c3:e7: 1b:41:68:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdSgJxbwqvDl3LsAefdziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi Y2UxN2YwHhcNMjUxMjE1MTAwMTI0WhcNMjUxMjE2MTAwMTI0WjAzMTEwLwYDVQQD Eyg0MTg4MWI4YjllYmRlNTJhMmNhYmM5NmRhM2Q3NzViNTZmMDQyYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBK+8fbOvsg/T5TT2ZjzsVrUMU3K WDAgHlv7btf5AqTeHVbA+ZPmsaSzBNqcYv3Yr6CJdeUceZhdDJQgEaZIxUTFi4J0 F3wbnXuWEL4a5XcwIi7JBByyoVJjrYlNGYOeP1dy/HCnrykcR4qovM2KuXs/CPgu 3qp9lHIceVsqYvnEd0SYFwDRcr1NFUnQqW6kwzZ/i0uSuuowg+ELIYy6ddqzomwq a8q4f6gox4Jj1fV9jMyE/b1+M1wJTEKWLhjd03lQS8lzZAnGZyVbIcfs7nlEVWR0 Doveb7O2CdgHviIZb1ZxqPs6Tp0B3xVqajOwLQEkW9RFZE6/QFL9+tMv/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGIG4ueveUqLKvJbaPXdbVvBCoUMB8GA1UdIwQY MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt NDVjYWE2ZWY2NzAwLzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/7rmwp4 SCU/v4bu9mQZm90e6W2dlQZXHGmQKyP44//t3fIWMrYZ4gl56Od3f9f+fijsmVrx k5EjbLKNtfDwEAEwTzTKFmCyVX/tj+il9WVmEX0sjdJa6tisDZCFq6EZGtxp7UHe l7ALbq9PZUP3IWFecm3KMaoyxTv05vFbOk8LAMD3xSpJAfHLB+Hy8FcrzEUTc0Ei 4er/d3wf7CrMyYaqhkTSrzs4ttjqur01ayxRotghxdGNTteHvZYackB2DODq35LX ofUW6vEWlKYrw0aSzrf6IQ5gO9KJwnaq2zZfZX+0jrZX14wIVvXBH86qAljDOgHx lg30CcPnG0Fo/Q== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:49 2025 by rpki-client